$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33e92975-c669-3c87-89ab-11bab602bbd6.roa File: 33e92975-c669-3c87-89ab-11bab602bbd6.roa (raw, json) Hash identifier: oOcihWsV4gZt6qsYlhj70ajlMu0ROHCp3m4l6oPd5yc= Subject key identifier: 5A:A2:0A:3D:C7:70:DE:45:C1:1A:85:59:D9:26:90:8E:E9:85:90:B0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF6DFF15BCBBDB72F4D6D47 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33e92975-c669-3c87-89ab-11bab602bbd6.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33651 IP address blocks: 76.133.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:df:f1:5b:cb:bd:b7:2f:4d:6d:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=79b53cde-8c53-4547-aaba-294139772556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4f:d9:c6:66:d5:a4:df:40:c7:80:aa:40:63: bc:fa:25:dc:2a:d2:38:73:ad:68:80:0d:1a:13:74: dc:65:fc:38:e9:9a:f6:37:a4:87:05:c4:e5:48:e7: 7c:1e:73:51:f2:c1:bb:cf:d5:a6:2f:88:e9:03:78: 04:35:26:a2:4b:b7:2d:6f:ce:81:b2:4a:28:37:c6: 8c:30:6c:c6:67:f2:c4:e7:20:b7:3d:a5:1a:2e:19: b2:99:53:41:27:e7:e6:0a:5b:cf:1f:5d:e8:ad:ae: 9c:e5:44:7e:33:1d:b5:53:fe:5b:bb:64:67:87:1f: 4c:38:30:61:3a:9e:cc:c4:8a:11:e0:1c:e0:d8:8a: d6:e1:a5:99:61:08:e6:d9:65:83:23:68:c6:74:ad: f3:21:70:12:72:54:8c:86:0b:9d:d8:da:fb:1d:8a: fa:79:45:7f:76:06:ed:cf:a3:20:56:0f:fc:d6:4c: b2:c2:55:18:2e:1b:64:6d:fe:6e:4f:df:a7:0e:98: ab:ac:da:e7:21:43:27:89:67:d1:4b:db:af:ab:34: 4f:6c:a0:21:d2:ed:98:d4:8d:5d:e3:0f:03:bb:79: a8:86:46:d8:51:76:8c:f7:bd:d1:13:5d:20:5a:3b: 6a:a6:6a:9e:04:f5:9d:68:d3:60:40:93:59:85:c8: 18:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A2:0A:3D:C7:70:DE:45:C1:1A:85:59:D9:26:90:8E:E9:85:90:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33e92975-c669-3c87-89ab-11bab602bbd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.133.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:4c:07:c3:40:94:32:e8:31:c7:58:4e:74:bc:71:8a:5d:07: c4:ef:2c:8c:bc:65:f1:bd:ef:4e:8c:5f:16:bd:23:fc:91:11: ee:7b:f2:07:3c:5c:3d:82:0c:49:a0:8a:82:a8:0e:d1:e4:3b: 64:9f:82:9f:f9:7c:ac:bc:32:74:b7:ab:28:bf:aa:c0:66:8a: 23:ed:68:30:8f:41:c7:fe:37:73:68:68:05:7d:b5:fd:e8:45: 4e:52:b2:22:07:b3:0e:54:8a:d1:7b:f3:43:0e:0e:86:f5:22: 6c:3d:e7:c6:d7:3e:8d:9e:80:6c:dc:2b:c9:ff:ab:a5:5c:a2: 1e:c9:cc:14:32:6b:88:5b:e4:a0:37:d3:29:8b:72:e0:03:a7: b6:31:10:53:0c:ed:e3:ac:27:1f:f0:71:4e:54:c9:f6:77:01: 58:74:91:1d:16:6b:b9:50:bd:81:fb:d8:cc:b7:cc:30:37:52: 94:75:7a:85:01:92:0f:3c:f6:79:69:42:02:f2:b1:db:59:49: d1:24:08:78:01:d7:d5:9e:bb:0a:3c:c7:81:fc:93:8f:34:cf: f8:a6:e9:b5:a0:ff:54:7c:e3:d3:9a:36:ab:9b:e4:83:a7:ee: f7:e6:8c:cf:e9:50:b1:17:d3:32:77:1d:7a:c6:06:fe:86:4c: a5:34:42:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9t/xW8u9ty9NbUcwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk NzliNTNjZGUtOGM1My00NTQ3LWFhYmEtMjk0MTM5NzcyNTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0/ZxmbVpN9Ax4CqQGO8+iXcKtI4c61ogA0a E3TcZfw46Zr2N6SHBcTlSOd8HnNR8sG7z9WmL4jpA3gENSaiS7ctb86BskooN8aM MGzGZ/LE5yC3PaUaLhmymVNBJ+fmClvPH13ora6c5UR+Mx21U/5bu2Rnhx9MODBh Op7MxIoR4Bzg2IrW4aWZYQjm2WWDI2jGdK3zIXASclSMhgud2Nr7HYr6eUV/dgbt z6MgVg/81kyywlUYLhtkbf5uT9+nDpirrNrnIUMniWfRS9uvqzRPbKAh0u2Y1I1d 4w8Du3mohkbYUXaM973RE10gWjtqpmqeBPWdaNNgQJNZhcgYmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFqiCj3HcN5FwRqFWdkmkI7phZCwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzNlOTI5NzUtYzY2OS0z Yzg3LTg5YWItMTFiYWI2MDJiYmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTIVkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABFMB8NAlDLoMcdYTnS8cYpdB8TvLIy8ZfG9706MXxa9I/yREe578gc8 XD2CDEmgioKoDtHkO2Sfgp/5fKy8MnS3qyi/qsBmiiPtaDCPQcf+N3NoaAV9tf3o RU5SsiIHsw5UitF780MODob1Imw958bXPo2egGzcK8n/q6Vcoh7JzBQya4hb5KA3 0ymLcuADp7YxEFMM7eOsJx/wcU5UyfZ3AVh0kR0Wa7lQvYH72My3zDA3UpR1eoUB kg889nlpQgLysdtZSdEkCHgB19Weuwo8x4H8k480z/im6bWg/1R849OaNqub5IOn 7vfmjM/pULEX0zJ3HXrGBv6GTKU0QmY= -----END CERTIFICATE-----Generated at Tue Apr 21 23:00:42 2026 by rpki-client